[Secure-testing-commits] r27749 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Thu Jul 17 05:39:47 UTC 2014
Author: carnil
Date: 2014-07-17 05:39:47 +0000 (Thu, 17 Jul 2014)
New Revision: 27749
Modified:
data/CVE/list
Log:
Add bugreferences for drupal7 issues
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-07-17 05:25:07 UTC (rev 27748)
+++ data/CVE/list 2014-07-17 05:39:47 UTC (rev 27749)
@@ -1,17 +1,18 @@
CVE-2014-XXXX [Cross-site scripting - Ajax system]
- drupal6 <not-affected> (Only affects Drupal 7 core)
- - drupal7 <unfixed>
+ - drupal7 <unfixed> (bug #755038)
NOTE: https://www.drupal.org/SA-CORE-2014-003
CVE-2014-XXXX [Cross-site scripting - Form API option groups]
- drupal6 <removed>
- - drupal7 <unfixed>
+ - drupal7 <unfixed> (bug #755038)
NOTE: https://www.drupal.org/SA-CORE-2014-003
CVE-2014-XXXX [Access bypass]
- drupal6 <not-affected> (Only affects Drupal 7 core)
+ - drupal7 <unfixed> (bug #755038)
NOTE: https://www.drupal.org/SA-CORE-2014-003
CVE-2014-XXXX [Denial of service with malicious HTTP Host header]
- drupal6 <removed>
- - drupal7 <unfixed>
+ - drupal7 <unfixed> (bug #755038)
NOTE: https://www.drupal.org/SA-CORE-2014-003
CVE-2014-4975
RESERVED
More information about the Secure-testing-commits
mailing list